Analyst, IT Security Vendor Risk Mgmt - Ciudad de México - Warner Bros. Discovery

Warner Bros. Discovery

Empresa verificada

Ciudad de México

hace 2 semanas

Publicado por:

Rodrigo Fernández

Reclutador de talento para beBee

Descripción

_Every great story has a new beginning, and yours starts here._

_ Welcome to Warner Bros. Discoverythe stuff dreams are made of._

Who We Are

When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth.

Behind WBD's vast portfolio of iconic content and beloved brands, are the _storytellers_ bringing our characters to life, the_ creators_ bringing them to your living rooms and the _dreamers_ creating what's next

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves.

Here you are supported, here you are celebrated, here you can thrive.

The Job

RISK ASSESSMENTS

Use WBD processes and tools to perform 3rd party vendor risk assessments, for new and existing vendors
Work with business to understand the "what" and "how" of services provided by vendor to assess level of risk and scope of assessment
Perform timely assessments of Vendor controls to identify, document, and communicate key deficiencies to the business and Information Security management
Report on assessment outcomes, risk level and associated recommendations to remediate issues
Assist with followup on documentation requests for initial and periodic assessments

FINDINGS MANAGEMENT

Monitor corrective action plans against agreed upon timelines
Review remediation evidence for closure of findings

CONTRACT REVIEWS

Review contracts to ensure appropriate data security terms are included
Provide comment and acceptable alternatives to vendor contract revisions, in alignment with defined guidance
Escalate provision changes, as needed

OTHER

Assist with contract intake to ensure pipeline of assessments is managed in a timely and efficient manner
Provide periodic status updates
Maintain accurate and complete data within the identified system of record
Contribute to the team's continuous improvement efforts by identifying opportunities and helping to implement them

The Essentials

BS/BA degree required
35 years' experience in information security, with at least one (1) year experience in third party risk management
Knowledge of IP network infrastructure (firewalls, intrusion detection/prevention), access control, data encryption and physical security; Cloud security knowledge a plus
Excellent communication skills, including the ability to communicate effectively in English, both written and verbal
Ability to present complex topics in clear, nontechnical language
Ability to work collaboratively within team and across business and technology functions
Detailoriented individual with critical thinking, analytical, and problemsolving skills
Demonstrated ability to be proactive and take ownership of and solve problems
Active learner able to enhance personal, professional, and business growth through new knowledge and experiences
Ability to handle multiple assignments concurrently within an iterative environment

The Nice to Haves

One or more of the following certifications: CISSP, CRISC, CISA
2+ years of prior experience in a related field (media, entertainment, business development or streaming services industry experience a plus)
Familiarity with streaming and similar products/services
Experience working in a national or global company

How We Get Things Done
**The Legal Bits